Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Powered by
Title
a
ananta
06/04/2021, 5:01 PM
can anyone point me to resources where i can learn more about event based tables in windows.
j
Juan Alvarez
06/04/2021, 5:26 PM
https://osquery.readthedocs.io/en/latest/development/pubsub-framework/
maybe this can help you out?
a
ananta
06/05/2021, 4:32 AM
Thank you very much but this doesn't talk about windows at all
3 Views
#windows
Join Slack